sj$UdZddlZddlZddlZddlZddlZddlmZddlm Z m Z m Z m Z m Z mZddlmZmZmZejeZdddd Zed Zed Zd Zd ZdZdZdede efdZdede fdZ!dede efdZ"ddde ede fdZ#ddde ede fdZ$da%defdZ&dedee ee feffdZ'de de fdZ(de ee fde fdZ)ehd Z*iZ+e ee fe,d!<d"ede fd#Z-de ee fde fd$Z.iZ/e eee0e0fe ee ffe,d%<d[d&Z1de ee ffd'Z2d\d(edzde efd)Z3de efd*Z4de efd+Z5iZ6e eee0fe efe,d,<d[d-Z7de efd.Z8de efd/Z9ej:;d0d1ej:;d2d1fZde efd6Z?dede fd7Z@dede efd8ZAde efd9ZBde eee0ffd:ZCde efd;ZDdZGde fd?ZHd[d@ZIdAefdBZJdCedefdDZKdefdEZLde fdFZMde ee fde ee ffdGZNde ee fde e ee ffdHZOde e ee ffdIZPdJZQdKe ee fdLefdMZRdNe e ee fde ee ffdOZSdPZTde ee fdefdQZUde ee fdefdRZVde ee fde fdSZWdedTefdUZXejYdVZZdWedee eeffdXZ[dYe ede fdZZ\dS)]aLightweight skill metadata utilities shared by prompt_builder and skills_tool. This module intentionally avoids importing the tool registry, CLI config, or any heavy dependency chain. It is safe to import at module level without triggering tool registration or provider resolution. N)Path)AnyDictListOptionalSetTuple)get_config_pathget_skills_dir is_termuxdarwinlinuxwin32)macosrwindows).gitz.githubz.hubz.archivez.venvvenv node_modulesz site-packages __pycache__z.toxz.noxz .pytest_cachez .mypy_cachez .ruff_cache) references templatesassetsscripts_orgz .active_orgz.org-provenance.jsonz.org-baseline.json skills_dirreturnc |tz tz }|sdS|d}|pdS#t $rYdSwxYw)zBThe org id whose mirror may resolve, or None (no org skills load).Nutf-8encoding)ORG_MIRROR_DIR_NAMEORG_ACTIVE_MARKERexists read_textstripOSError)rmarkervals 5/home/agent/.hermes/hermes-agent/agent/skill_utils.pyread_active_org_idr*Gs{114EE}} 4006688{d tts&A+A A$#A$c0 t|t|}n#ttf$rYdSwxYwt |jo|jdtkS)z6True when *path* is inside the org mirror (``_org/``).Fr)rresolve relative_tor& ValueErrorboolpartsr!pathrrels r)is_org_mirror_pathr4Ss4jj  ""..tJ/?/?/G/G/I/IJJ Z uu  ?? Bsy|/BBBAAA+*A+cV t|t|}n#ttf$rYdSwxYwt |jdkr#|jdtkr |jdSdS)z@The ```` segment for a path under ``_org//...``.Nr)rr,r-r&r.lenr0r!r1s r)org_id_of_pathr:\s4jj  ""..tJ/?/?/G/G/I/IJJ Z tt 39~~sy|/BBBy| 4r5rootr<c |j}n3#t$r&ddlm}|t |j}YnwxYwt d|Dpt ||S)axTrue if *path* should be skipped by active skill scanners. Use this on every ``SKILL.md`` path produced by direct ``rglob`` scans to prune dependency, virtualenv, VCS, cache, and progressive-disclosure support-package paths. Centralising the check here keeps every skill-scanning site in sync with the shared exclusion set. Accepts a Path or string. r)PurePathc3(K|] }|tvVdSN)EXCLUDED_SKILL_DIRS).0parts r) z)is_excluded_skill_path..vs(==tt**======r;)r0AttributeErrorpathlibr>stranyis_skill_support_path)r2r<r0r>s r)is_excluded_skill_pathrKgs*  ***$$$$$$T##)* ==u=== = = AV 4BBBs  -::c`t|tr|ntt|}|j}t |ddD][\}}|t vs|dkrt|d|}||s||z }|dz rdS\dS)aTrue if *path* is under a support dir of an actual skill root. ``references/``, ``templates/``, ``assets/``, and ``scripts/`` are progressive-disclosure support areas when they sit directly inside a skill directory containing ``SKILL.md``. They are not active discovery roots for standalone skills. A preserved package such as ``some-skill/references/old-skill-package/SKILL.md`` is documentation data unless the caller explicitly loads it via ``file_path``. Legitimate categories or skill names such as ``skills/scripts/foo`` remain discoverable because their ``scripts`` component is not directly under a directory that contains ``SKILL.md``. NrSKILL.mdTF) isinstancerrHr0 enumerateSKILL_SUPPORT_DIRS is_absoluter#)r2r<path_objr0idxrC skill_roots r)rJrJ{s"$--Btt4D ??H NEuSbSz** T ) ) )SAXX 5#;'  H$8$8$:$:  *J  # + + - - 44  5rEcontentct,ddltddpjdtffd }|at|S)z7Parse YAML with lazy import and CSafeLoader preference.Nr CSafeLoadervaluec2|S)N)Loader)load)rYloaderyamls r)_loadzyaml_load.._loads99U6922 2rE) _yaml_load_fnr^getattr SafeLoaderrH)rVr_r]r^s @@r) yaml_loadrcsl }d33Ft 3 3 3 3 3 3 3 3  ! !!rEci}|dr |dd}|}|ds||fStjd|dd}|s||fS|d|dz}||dzd} t |}t |tr|}n#t$rt| dD]I}d|vr| dd\}}| || <JYnwxYw||fS) uParse YAML frontmatter from a markdown string. Uses yaml with CSafeLoader for full YAML support (nested metadata, lists) with a fallback to simple key:value splitting for robustness. A single leading UTF-8 BOM (U+FEFF) is stripped before parsing. Windows GUI editors (Notepad, PowerShell ``>``) prepend one when saving a SKILL.md as UTF-8, and ``read_text(encoding="utf-8")`` preserves it (only ``utf-8-sig`` strips it). Left in place, the BOM defeats the ``---`` fence check below and the whole frontmatter is silently discarded — name, description, ``platforms`` gating, env-var setup, and conditional activation all vanish. See CONTRIBUTING.md "File encoding". Returns: (frontmatter_dict, remaining_body) ur8Nz---z \n---\s*\n :) startswithresearchstartendrcrOdict Exceptionr%split) rV frontmatterbody end_match yaml_contentparsedlinekeyrYs r)parse_frontmatterrws"#%K(##!""+ D   e $ $!D   -55I !D  1y001445L 9==??Q&(( )D 5<(( fd # # ! K 555 &&((..t44 5 5D$C++JC',{{}}K $ $  5 55  s&CA;EE platformscp|sdSt|ts|g}tj}t }|D]|}t |}t ||}| |rdS|r |dkrdS|r|dvrdS}dS)z?Return True when *platforms* is compatible with the current OS.Tr)termuxandroidF) rOlistsysplatformr rHlowerr% PLATFORM_MAPgetrh)rxcurrentrunning_in_termuxr~ normalizedmappeds r)skill_matches_platform_listrs t i & & K lG!   ]]((**0022 !!*j99   f % % 44  7!2!244  +@!@!@44 5rErpcFt|dS)avReturn True when the skill is compatible with the current OS. Skills declare platform requirements via a top-level ``platforms`` list in their YAML frontmatter:: platforms: [macos] # macOS only platforms: [macos, linux] # macOS and Linux If the field is absent or empty the skill is compatible with **all** platforms (backward-compatible default). Termux note: on Termux/Android, ``sys.platform`` is ``"linux"`` on older Pythons but became ``"android"`` on Python 3.13+. Termux is a Linux userland riding on the Android kernel, so skills tagged ``linux`` are treated as compatible in Termux regardless of which ``sys.platform`` value Python reports. Individual Linux commands inside a skill may still misbehave (no systemd, BusyBox utils, no apt/dnf, etc.) but that is on the skill, not on platform gating. rx)rr)rps r)skill_matches_platformrs( '{{'C'C D DDrE>s6dockerkanban_ENV_DETECT_CACHEenvcF|dkr|tvr t|Sd}|dkrtjdstjdr$ ddlm}|}n#t $rd}YnwxYwd}|rd}n ddlm}t|}n#t $rd}YnrwxYw|d kr$ dd l m }|}nV#t $rd}YnHwxYw|d kr>tj d ptj d }|t|<|S)aqReturn True when the named runtime environment is currently active. Cached per process, EXCEPT ``kanban``: that verdict is context-dependent (a delegate_task child or an in-process cron job sees the worker's HERMES_KANBAN_* vars without owning them), so caching it process-wide would freeze whichever context asked first and leak it to the others. rTHERMES_KANBAN_TASKHERMES_KANBAN_BOARDr)"is_dispatcher_owned_worker_contextF)_profile_has_kanban_toolsetr) is_containerrz/run/s6z/package/admin/s6-overlay) rosgetenvagent.delegation_contextrrntools.kanban_toolsrr/hermes_constantsrr2isdir)rresultr_owns_dispatcher_taskrrs r)_detect_environmentr"s h3"333 %% F h 9) * * *bi8M.N.N * -)K(J(L(L%% - - -(,%%% -%* !  FF JJJJJJ99;;<<       5 5 5 5 5 5!\^^FF   FFF   y)) RW]] '. . $c Ms6A A.-A.9B B&%B&0C CCc|d}|sdSt|ts|g}|D]V}t|}|s8|t vrdSt|rdSWdS)uRReturn True when the skill is relevant to the current runtime environment. Skills may declare an ``environments`` list in their YAML frontmatter:: environments: [kanban] # only relevant when kanban is active environments: [s6] # only relevant inside the s6 Docker image environments: [docker] # only relevant inside any container If the field is absent or empty the skill is relevant in **all** environments (backward-compatible default). This is an OFFER-time filter: it controls whether a skill shows up in the skills index / autocomplete / slash-command list. It is intentionally NOT enforced by ``skill_view`` or ``--skills`` preloading — an explicit load is explicit consent, and load-bearing force-loads (e.g. a dispatcher pinning a task to a specialist skill via ``--skills``) must always succeed regardless of how the offer surfaces filter the skill. A skill matches when ANY of its declared environments is currently active (OR semantics, mirroring ``platforms``). Unknown env tags fail open. environmentsTF)rrOr|rHrr%_KNOWN_ENVIRONMENTSr)rprrrs r)skill_matches_environmentr`s,??>22L t lD ) )&$~ XX^^%%++--    0 0 044 z * * 44  5rE_RAW_CONFIG_CACHEc8tdS)u/Test hook — drop the shared raw config cache.N)rclearrEr)_raw_config_cache_clearrsrEcBt}|siS |}t||j|jf}n#t $rd}YnwxYw|t|}||S t| d}n5#t$r(}t d||icYd}~Sd}~wwxYwt|tsiS|#t|t|<|S)aRead config.yaml with a shared mtime+size keyed cache. This module intentionally avoids importing ``hermes_cli.config`` on the skill prompt/build path. A tiny local cache gives the same repeated-read win without pulling the heavier CLI config stack into startup. Nrrz"Could not read skill config %s: %s)r r#statrH st_mtime_nsst_sizer&rrrcr$rnloggerdebugrOrmr) config_pathr cache_keycachedrtes r)_load_raw_configrsN"##K      !!%%t'7F  "&&y11  M;00'0BBCC  9;JJJ  fd # # !!!'-)$ Ms/0A A&%A& #B.. C 8CC C r~ct}|stS|d}t|tstSddlm}|ptjdp |d}t|d}|r>|dpi|}||t|zS|S)a Read disabled skill names from config.yaml. Args: platform: Explicit platform name (e.g. ``"telegram"``). When *None*, resolves from ``HERMES_PLATFORM`` or ``HERMES_SESSION_PLATFORM`` env vars. Returns the global disabled list, unioned with the platform-specific list when a platform is resolved (a globally-disabled skill stays disabled on every platform). Reads the config file directly (no CLI config imports) to stay lightweight. skillsr)get_session_envHERMES_PLATFORMHERMES_SESSION_PLATFORMdisabledplatform_disabled) rsetrrOrmgateway.session_contextrrr_normalize_string_set)r~rt skills_cfgrresolved_platformglobal_disabledrs r)get_disabled_skill_namesrs  F uu H%%J j$ ' 'uu 777777 6 9& ' ' 6 ?4 5 5 ,JNN:,F,FGGON'^^,?@@FBKK     ("%:;L%M%MM M rEc|gSt|tr||}|drP t j|}n#t tf$rd}YnwxYwt|tr d|DS|gSt|ttttfr d|DSgS)aNormalize a config value that may hold a JSON-array string into a list. ``hermes config set`` and JSON-mode editor saves store lists as quoted JSON strings (``'["a","b"]'`` or the Python-literal ``"['a']"``). Treating such a string as a single name makes a curated disabled list silently filter nothing (#86661); parsing it restores the intended list. A scalar string still means one name (#13026). N[c,g|]}t|SrrHrBitems r) z,parse_config_string_list..s555dD 555rEc,g|]}t|Srrrs r)rz,parse_config_string_list..s,,,dD ,,,rE) rOrHr%rhast literal_evalr. SyntaxErrorr|tupler frozenset)rYstrippedrts r)parse_config_string_listrs } % ;;==   s # # 6 )(33 ,    &$'' 655f5555w%$sI677-,,e,,,, IsAA/.A/c4dt|DS)Nc^h|]*}||+Sr)r%)rBnames r) z(_normalize_string_set..s- V V VT VDJJLL V V VrE)r)valuess r)rrs V V%=f%E%E V V VVrE_EXTERNAL_DIRS_CACHEcTttdS)u(Test hook — drop the in-process cache.N)rrrrrEr)_external_dirs_cache_clearrs&   rEcPt}|sgS |}t||jf}n#t $rd}YnwxYw|+t |}|t|St}|sgS|d}t|tsgS|d}|sg}|t|t |<|St|tr|g}t|tsgSddl m }|} t} t!} g}|D]} t| } | s't$jt$j| } t-| }|s| |z }n|}|| kr|| vr|r+| |||t6d||t|t |<|S)u3Read ``skills.external_dirs`` from config.yaml and return validated paths. Each entry is expanded (``~`` and ``${VAR}``) and resolved to an absolute path. Only directories that actually exist are returned. Duplicates and paths that resolve to the local ``~/.hermes/skills/`` are silently skipped. Cached in-process, keyed on ``config.yaml`` mtime — the function is called once per skill during banner / tool-registry scans, and YAML parsing a non-trivial config dominates ``hermes`` cold-start time when the cache is absent. Nr external_dirsrget_hermes_homez0External skills dir does not exist, skipping: %s)r r#rrHrr&rrr|rrOrmrrr r,rr%rr2 expanduser expandvarsrrRis_diraddappendrr)rrrrrtrraw_dirsrr hermes_home local_skillsseenentryexpandedps r)get_external_skills_dirsr s"##K      !!&)+&6&68H%I  %)))44  <<    F  H%%J j$ ' ' ~~o..H   .26ll  + (C  : h % % 000000!/##K!##++--LeeD FPPE   ""  7%%bg&8&8&?&?@@ NN}} q))++AA A    99  88:: P HHQKKK MM!     LLKQ O O O O*.v,,Y' Ms*A A A cftg}|t|S)u@Return all skill directories: local ``~/.hermes/skills/`` first, then external. The local dir is always first (and always included even if it doesn't exist yet — callers handle that). External dirs follow in config order. NOTE: trusted project-local dirs (``./.hermes/skills`` at the git root) are NOT part of this list — they have *higher* precedence than the local dir, so callers that need them use :func:`get_project_skills_dirs` and scan those roots first. See ``get_scan_ordered_skills_dirs`` for the full precedence-ordered list. )r extendrdirss r)get_all_skills_dirsr]s0    DKK(**+++ KrEz.hermesrz.agents@rkc  |Ctjd}|rt|ntj}t|}n#t $rYdSwxYwtj}ttD]O} |dz r ||krdS|cSn#t $rYdSwxYw|j |krdS|j }PdS)uLocate the enclosing project root: nearest ancestor containing ``.git``. Returns None when cwd is not inside a git checkout. ``.git`` may be a dir (normal clone) or a file (worktree/submodule) — both count. When *start* is not given, the surface's working directory wins over the process cwd: ``TERMINAL_CWD`` is the same per-surface workdir the terminal tool and cron jobs use (a cron job sets it from its per-job ``workdir`` without chdir'ing the scheduler process). This is what lets non-interactive surfaces inherit a prior interactive trust decision by project identity — and a surface with no workdir in a trusted repo simply resolves no project and loads nothing (#48975). N TERMINAL_CWDr) renvironrrcwdr,r&homerange_PROJECT_ROOT_MAX_DEPTHr#parent)rkenv_cwdcurr_s r)find_project_rootrs( =jnn^44G%,True when *root* is listed in ``skills.trusted_project_dirs``.F)rr,rr&r;s r)is_project_root_trustedrsMDzz!!##'H'J'JJJ uus .1 ??c0t}g}tD]k}||z } |r?||kr'||\#t $rYhwxYw|S)aExisting skill dirs under *root*, excluding the profile's own skills dir. The exclusion matters when HERMES_HOME itself lives inside a git checkout: ``/.hermes/skills`` would otherwise double as both the profile-local and the project tier. )r r,PROJECT_SKILLS_SUBDIRSrrr&)r<rrsubcands r)_candidate_project_skills_dirsrs"##++--LD%cz {{}} ,.s"JJqJJJJJJrErN) rrOrmrrrrsumiter_skill_index_filesr&)rtrr<countds r)!get_untrusted_project_skills_rootr s   F)3FD)A)AKH%%%tJ*d## 7J(K(Ku(T(Tt   D |.t44|t E +D 1 1  SJJ$:1j$I$IJJJJJ JEE    H  zzt ;s*C  CCctt}|t|t |S)uAll skill dirs in precedence order: project → local → external. First-wins name deduplication over this order gives project skills priority over profile-local and external ones. )r|rrr rrrs r)get_scan_ordered_skills_dirsrsN ')) * *DKK  !!!KK(**+++ KrEz project-local_PROJECT_QUARANTINE_CACHEc.ddlm}|dz dz S)Nrrcacheproject_skill_scans)rrrs r)_project_scan_cache_dirr@s-000000 ?  w &)> >>rEct|j} t|}n#t$rt|}YnwxYwt |}||S ddlm}||tt\}}|j dk}|r!t d||jn/#t$r"t d|d d}YnwxYw|t |<|S) uTrue when a project skill's scan verdict is ``dangerous``. Fail-closed: a scanner crash or missing scanner quarantines the skill (repo-sourced content with no completed scan must not load). Non-project callers should not call this — it scans unconditionally. Nr)scan_skill_cached)source cache_dir dangerousu8Project skill quarantined (verdict=dangerous): %s — %su<Project skill scan failed — quarantining (fail closed): %sT)exc_info)rrrHr,r&rrtools.skills_guardr_PROJECT_SCAN_SOURCErverdictrwarningsummaryrn)skill_md skill_dirrvrrr_prov quarantineds r)is_quarantined_project_skillr$FsRX%I)##%%&& )nn & * *3 / /F  888888)) '-//    n 3   NNJ     J      &1c" s"!8AA6AC )C98C9c8tdS)z Test hook.N)rrrrEr)_project_quarantine_cache_clearr&os##%%%%%rE project_dirc#XKt|dD]}t|r|VdS)a!Yield non-quarantined SKILL.md files under a trusted project dir. The single iteration chokepoint for the project tier: every consumer (index, skills_list, slash commands) iterates through here so the quarantine cannot be bypassed by a new call site forgetting the check. rNN)r r$)r'r s r)iter_project_skill_filesr)tsI+; CC ' 1 1  rE identifiercj|pd}|s|St|}|s|dS ddlm}t|j}n#t$rt}YnwxYw|g} | tn#t$rYnwxYw | tn#t$rYnwxYw|D]6} t||cS#t$rY3wxYw t||S#t$r t"d||cYSwxYw)aNormalize a skill identifier to a ``skill_view()``-safe relative path. Slash commands and cron jobs may store absolute paths to skills that live under ``~/.hermes/skills/`` (including via symlinks) or configured ``skills.external_dirs``. ``skill_view()`` rejects absolute names for security, so callers must translate trusted absolute paths to their relative form first. /r) skills_toolu~Skill identifier %r is an absolute path outside trusted skills roots — passing through unchanged (skill_view will reject it))r%rrrRlstriptoolsr. SKILLS_DIRrnr rrrrHr-r.r,rr)r*raw_identifieridentifier_path _skills_tool primary_root trusted_rootsr<s r)normalize_skill_lookup_namer7s$!&B--//N >**5577O  & & ( (*$$S)))(555555L344 (((%'' ("NM 4667777       5778888       2248899 9 9 9    H ?**,,889M9M9O9OPPQQQ   N     s[&BBB#!C CC!C88 DD !D11 D>=D>AF'F21F2c0t|tr|ntt|} |S#t t f$r)|cYSwxYwr@)rOrrHrr,r& RuntimeErrorabsolute)r2rSs r)_resolve_for_skill_ownershipr;s!$--Btt4D ??H0""$$,,... \ "000""$$--/////0s%A7BBc8t|}tt} |t n#t $rYnwxYw|D]9}t|} ||dS#t$rY6wxYwdS)aReturn True when ``path`` lives under a configured external skills dir. ``skills.external_dirs`` are externally owned: Hermes can discover and view their skills, and foreground user-directed tool calls may still edit them, but autonomous lifecycle maintenance must treat them as read-only. This helper centralizes the ownership boundary so curator/reporting/tool paths do not each need to re-interpret the config. TF)r;r|rrrrnr-r.)r2 candidaterootsr< resolved_roots r)is_external_skill_pathr@s-T22I57788E  ,..////      4T::    ! !- 0 0 044    H  5s#!A AA2B  BBcd|d}t|tsi}|dpi}t|tsi}|dg|dg|dg|dgdS)z>Extract conditional activation fields from parsed frontmatter.metadatahermesfallback_for_toolsetsrequires_toolsetsfallback_for_toolsrequires_tools)rDrErFrG)rrOrm)rprBrCs r)extract_skill_conditionsrHsz**H h % % \\( # # )rF fd # #!',CR!H!H#ZZ(;R@@$jj)=rBB **%5r::   rEc|d}t|tsgS|d}t|tsgS|d}|sgSt|tr|g}t|tsgSg}t }|D]3}t|tst |dd}|r||vrUt |dd}|s||d} |d} | | | d<|d } t| t r,| r| | d <n|| d <|||| 5|S) aExtract config variable declarations from parsed frontmatter. Skills declare config.yaml settings they need via:: metadata: hermes: config: - key: wiki.path description: Path to the LLM Wiki knowledge base directory default: "~/wiki" prompt: Wiki directory path Returns a list of dicts with keys: ``key``, ``description``, ``default``, ``prompt``. Invalid or incomplete entries are silently skipped. rBrCconfigrvr, description)rvrKdefaultNprompt) rrOrmr|rrHr%rr) rprBrCrrrrrvdescrrL prompt_texts r)extract_skill_config_varsrPs z**H h % % \\( # #F fd # # **X  C  #te c4  #%FD$%%  $((5"%%&&,,.. cTkk 488M2..//5577  ! ! ((9%%  &E) hhx(( k3 ' ' #K,=,=,?,? #)//11E(OO"E(O   e MrEcrg}t}t}tD]}|st |dD]} |d}t |\}}n#t$rY8wxYw|dp |j j }t||vrot|st|} | D]N} | d|vrBt|| d<|| || dO |S)aYScan all enabled skills and collect their config variable declarations. Walks every skills directory, parses each SKILL.md frontmatter, and returns a deduplicated list of config var dicts. Each dict also includes a ``skill`` key with the skill name for attribution. Disabled and platform-incompatible skills are excluded. rNrrrrvskill)rrrrr r$rwrnrrrrHrrPrr) all_vars seen_keysrr skill_filerrpr skill_name config_varsvars r)discover_all_skill_config_varsrY3si&(HUUI'))H)++..   ""  0ZHH . .J  **G*<<!23!7!7 QQ    %00JJ4E4JJ:(**)+66 3K@@K" . .u:Y..#&z??CLOOC(((MM#e*---  . .( Os(B B Bz skills.configrJ dotted_keyc|d}|}|D]&}t|tr ||vr ||}$dS|S)zPWalk a nested dict following a dotted key. Returns None if any part is missing..N)rorOrm)rJrZr0rrCs r)_resolve_dotpathr]`sZ   S ! !EG gt $ $ dmGG44 NrErWct}i}|D]}|d}td|}t||}|)t|tr*|s|dd}t|trDd|vsd|vr`` in config.yaml. Returns a dict mapping **logical** keys (as declared by skills) to their current values (or the declared default if the key isn't set). Path values are expanded via ``os.path.expanduser``. rvr\NrLr,~z${) rSKILL_CONFIG_PREFIXr]rOrHr%rrr2rr)rWrJresolvedrX logical_key storage_keyrYs r)resolve_skill_config_valuesrdls  F!H & &%j ,<<{<<  55 =Zs33=EKKMM=GGIr**E eS ! ! Bse||tu}}G&&rw'9'9%'@'@AAE % OrE<c|dd}|r4t|dndS)z@Normalize a skill's description field for comparison/truncation.rKr,z'")rrHr%)rpraw_descs r)_normalize_skill_descriptionrhsE}b11H19 A3x==   & &u - - -rArEct|}|sdSt|tkr|dtdz dzS|S)zCExtract a system-prompt-length description from parsed frontmatter.r,Nrez...rhr9SKILL_PROMPT_DESC_LIMITrprNs r)extract_skill_descriptionrmsO ' 4 4D r 4yy***0,q001E99 KrEcPt|}t|tkS)zMTrue when the description will be truncated in the system prompt skill index.rjrls r))is_skill_description_truncated_for_promptros! ' 4 4D t99. ..rEfilenamec#> Kt|}t| tj|t }g}tj|dD]\}}}d|v ||kr&t |vr |t n||kr fd|D|dd< fd|D|dd<||vr3|tj||t|D]}t|VdS)uWalk skills_dir yielding sorted paths matching *filename*. Excludes Hermes metadata, VCS, virtualenv/dependency, cache, and skill support directories. Support directories (references/templates/assets/ scripts) can contain arbitrary markdown and even archived package ``SKILL.md`` files, but they are progressive-disclosure data loaded through ``skill_view(..., file_path=...)`` rather than active skill roots. M2 org mirrors (``_org/``): TOKEN-GATED resolution. Only the active org's subdir (per the sync-client-written ``.active_org`` marker) is walked; every other ``_org//`` (stale mirror from a previous org, or no marker at all) is pruned — leave an org and its skills stop resolving, without any manual cleanup. T) followlinksrNNc g|] }|k| Srr)rBr  active_orgs r)rz*iter_skill_index_files..s:::Q!z//q///rEc<g|]}|tvr r |tv|Sr)rArQ)rBr  has_skill_mds r)rz*iter_skill_index_files..sE   +++!,&'+=&=&= '>&=&=rE) rHr*rr2joinr!walkremoversortedr) rrpskills_dir_strorg_rootmatchesr<rfilesr2rtrvs @@r)r r s]__N#J//Jw||N,?@@HGW^FFF99dE!U* > ! !&9T&A&AjFX KK+ , , , , X  ::::$:::DG       QQQ u   NN27<<h77 8 8 8w4jjrEz^[a-zA-Z0-9_-]+$rcXd|vrd|fSt|ddS)z~Split ``'namespace:skill-name'`` into ``(namespace, bare_name)``. Returns ``(None, name)`` when there is no ``':'``. rgNr8)rro)rs r)parse_qualified_namers3  $Tz C## $ $$rEr=cX|sdStt|S)zDCheck whether *candidate* is a valid namespace (``[a-zA-Z0-9_-]+``).F)r/ _NAMESPACE_REmatch)r=s r)is_valid_namespacers+ u  ##I.. / //rE)rNr@)]__doc__rloggingrrir}rGrtypingrrrrrr rr r r getLogger__name__rrrrArQr!r"ORG_PROVENANCE_FILEORG_BASELINE_FILErHr*r/r4r:rKrJr`rcrwrrrr__annotations__rrrintrrrrrrrrrr2rwrrrrrrrr rrrrr$r&r)r7r;r@rHrPrYr`r]rdrkrhrmror compilerrrrrEr)rs  8888888888888888GGGGGGGGGG  8 $ $    i.YOPP!,) 4 HSM    CC$CCCCThsm<@(4.D(;?$4>  "s " " " "$.s.uT#s(^S-@'A....h342ES#XE4EEEEB i : : :;;%'4T ?''';S;T;;;;|$4S>$d$$$$TAC4c3m,d38n<=BBB $sCx.    F##sTz#SX####LtCy4WSXWWWW;=d5c?DJ67<<< P$t*PPPPfT$Z`GLLH%%GLLH%% ##Xd^#x~####L3t92$4$t*&0d0000&8E$)4D+E2 d4j    <'.04T ?///????? &d&&&&R&&&& $    :C:C::::z0$0000D<$sCx.T#t)_(84S>8d4S>>R8888v$T#s(^(<$$$$T& T#s(^     d38n% #s(^@Bd38nBBBBB 4S>c/4S>/d////#t#s####P .// %s%uXc]C-?'@%%%%0(3-0D000000rE